Ed Galligan

> package-url are just capturing the fact they exist and offers a simple ecosystem-neutral syntax to capture such a namespace when it exists. > It just happens that there is...

Also running into this issue - I'm wondering if it's possible to *ignore and continue* for https URIs in the short-term until the team settles on an appropriate way to...